PREQUEL-2025-0093

aws-load-balancer-controller rejects Ingress resource with wildcard path and Prefix pathTypeMedium

Impact: 8/10

Mitigation: 5/10

PREQUEL-2025-0093View on GitHub

KubernetesAWS Loadbalancer ControllerIngress ResourceAWSNetworkingConfigurationPath ValidationALBRouting

Description

The aws-load-balancer-controller is unable to translate an Ingress resource into an AWS ALB Listener Rule when the path contains a wildcard (*) and the pathType is set to Prefix.\n

Mitigation

- Update the Ingress resource to use a different pathType, such as Exact, if possible.\n- Modify the path to remove the wildcard (*) and use a more specific path.\n- Consider using a different ingress controller that supports wildcard paths with Prefix pathType.\n

References

• https://kubernetes.io/docs/concepts/services-networking/ingress/#path-types
• https://github.com/kubernetes-sigs/aws-load-balancer-controller